Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          ypXBk56u+yI0FVs4MH2yxhv68LQNff1xZic0b1xBwtA=
Subject key identifier:   83:DD:4B:D2:6E:DE:05:EC:64:B9:6E:51:8A:F4:CF:1F:A4:68:A1:B3
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       70C718D59A0C31C457560ED0FEF048F0C51B411E
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        172.108.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:c7:18:d5:9a:0c:31:c4:57:56:0e:d0:fe:f0:48:f0:c5:1b:41:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=83DD4BD26EDE05EC64B96E518AF4CF1FA468A1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b6:34:ba:40:2a:38:8b:5a:86:0e:10:7e:07:
                    e4:2c:30:43:26:fa:05:fc:ec:45:0d:7f:f1:4b:f0:
                    8e:b1:30:89:78:d7:a6:a7:5c:4d:4b:bb:d5:65:df:
                    cf:96:60:b2:7c:11:b7:39:07:bb:f2:bc:91:d7:d1:
                    40:4f:6c:c6:ea:c4:26:31:ac:d8:e3:e2:e6:e7:e3:
                    82:e2:13:92:2d:77:8f:fc:bf:b4:c8:c3:d6:a9:47:
                    02:93:1a:65:72:18:b5:aa:c1:28:5c:71:c6:ad:af:
                    4d:f5:65:31:03:66:96:a0:d7:ae:44:65:a3:8c:e2:
                    98:c3:ed:15:82:be:ad:4a:55:25:57:90:1e:17:e6:
                    b8:ea:26:ac:6f:2c:9e:b7:80:af:e4:f2:91:7b:e8:
                    43:8e:33:7e:7e:a7:c4:1c:f6:66:45:54:34:3b:df:
                    ae:c1:e4:56:73:21:ff:86:90:40:45:a7:e2:a1:c3:
                    8b:1a:a7:24:a2:33:87:85:32:b2:54:95:9c:fa:57:
                    f9:7b:97:ea:25:d0:3c:e2:88:68:f1:c4:62:ff:14:
                    10:cd:d0:0a:0f:35:42:13:db:74:07:d9:ed:6d:75:
                    d2:f8:77:ce:a6:43:33:22:00:bf:30:11:d6:bf:f2:
                    c9:fc:84:c4:2f:f1:66:cb:fa:e4:00:cf:12:87:b1:
                    aa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:DD:4B:D2:6E:DE:05:EC:64:B9:6E:51:8A:F4:CF:1F:A4:68:A1:B3
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131322e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:24:e6:5d:23:be:69:b5:c0:31:a3:13:9b:c6:01:09:6a:6a:
         05:e1:56:6b:43:c2:e6:59:06:24:18:5d:66:42:54:55:16:e8:
         d1:72:5c:e9:c4:28:41:1c:55:b2:b9:73:49:dc:98:ac:8a:2d:
         1b:d3:a5:56:37:90:4f:49:1f:d3:5a:11:5d:2a:2f:3b:90:dc:
         5b:97:60:47:e8:79:23:c0:34:2c:46:18:c1:99:9b:b6:33:13:
         27:ec:ea:ad:68:e0:ab:3c:50:02:e7:93:fb:27:9b:4a:01:4b:
         4e:0d:90:af:1a:2a:98:11:f1:ac:7d:13:c5:71:dc:ef:bf:a7:
         9e:8e:d1:d9:b6:f0:43:97:50:06:75:f0:f8:71:fa:fc:fe:af:
         f0:47:20:e5:72:cb:50:49:a5:10:e0:c7:c9:91:00:3d:e4:2e:
         83:c4:04:7a:8c:37:ff:50:8a:2f:f9:58:f3:9f:ae:ca:04:2e:
         91:13:df:83:64:b2:36:c7:ba:5f:e3:69:da:97:b4:6a:bb:3f:
         ec:77:cf:fa:ce:e3:58:02:b6:1a:56:4a:6c:5a:89:8b:dc:ad:
         ce:7a:8a:19:9b:c3:99:d9:37:eb:0f:e4:d3:39:6f:19:f2:54:
         e4:94:ce:49:c1:b0:65:00:e3:13:61:5b:06:c9:5d:bb:8b:e2:
         84:1f:3c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:46 2026 by rpki-client